The vulnerability of Zyxel network device microprogramming software, related to the failure to take measures to neutralize special elements, allows a perpetrator to execute arbitrary code.

The vulnerability of Zyxel network device microprogramming software is related to the lack of measures taken to neutralize special elements. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

EUVD-2021-21680

Malware in sbrugna...

EUVD-2024-48208

Malicious code in bioql PyPI...

EUVD-2025-1913

Malicious code in bioql PyPI...

EUVD-2023-41780

Malicious code in bioql PyPI...

EUVD-2023-39166

Malicious code in bioql PyPI...

EUVD-2022-46432

Malicious code in bioql PyPI...

EUVD-2023-39169

Malicious code in bioql PyPI...

EUVD-2023-27020

Malicious code in bioql PyPI...

EUVD-2024-50823

Malicious code in bioql PyPI...

EUVD-2023-58080

Malicious code in bioql PyPI...

EUVD-2024-48171

Malicious code in bioql PyPI...

EUVD-2024-39428

Malicious code in bioql PyPI...

EUVD-2023-41778

Malicious code in bioql PyPI...

EUVD-2022-31089

Malicious code in bioql PyPI...

CVE-2023-33012

A command injection vulnerability in the configuration parser of the Zyxel ATP series firmware versions 5.10 through 5.36 Patch 2, USG FLEX series firmware versions 5.00 through 5.36 Patch 2, USG FLEX 50W series firmware versions 5.10 through 5.36 Patch 2, USG20W-VPN series firmware versions 5.10...

CVE-2023-5797

An improper privilege management vulnerability in the debug CLI command of the Zyxel ATP series firmware versions 4.32 through 5.37, USG FLEX series firmware versions 4.50 through 5.37, USG FLEX 50W series firmware versions 4.16 through 5.37, USG20W-VPN series firmware versions 4.16 through 5.37,...

CVE-2025-3577

UNSUPPORTED WHEN ASSIGNED A path traversal vulnerability in the web management interface of the Zyxel AMG1302-T10B firmware version 2.00AAJC.16C0 could allow an authenticated attacker with administrator privileges to access restricted directories by sending a crafted HTTP request to an affected...

CVE-2024-42059

A post-authentication command injection vulnerability in Zyxel ATP series firmware versions from V5.00 through V5.38, USG FLEX series firmware versions from V5.00 through V5.38, USG FLEX 50W series firmware versions from V5.00 through V5.38, and USG20W-VPN series firmware versions from V5.00...

CVE-2024-12398

An improper privilege management vulnerability in the web management interface of the Zyxel WBE530 firmware versions through 7.00ACLE.3 and WBE660S firmware versions through 6.70ACGG.2 could allow an authenticated user with limited privileges to escalate their privileges to that of an...